CVE-2024-6916medium

CVE-2024-6916: medium-severity vulnerability in Open Mainframe Project Zowe CLI - Imperative

Zowe CLI --show-inputs-only displays securely stored properties

Published · Updated

Follow this CVE+ Monitor Zowe CLI - Imperative

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.1%
A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C/CR:M/IR:X/AR:X/MAV:L/MAC:L/MPR:L/MUI:R/MS:C/MC:H/MI:N/MA:N
Affected products
Open Mainframe Project · Zowe CLI - Imperative